New connection mark
ss-vpn and firewall